Wireless communication apparatus, authentication apparatus, wireless communication method and authentication method

ABSTRACT

According to one embodiment, when a control unit is notified of information in at least one second signal received by one of first and second wireless communication units after the control unit provides the second wireless communication unit with a command to transmit a first signal containing first address information and before a waiting time elapses and when the at least one second signal contains second address information assigned to an authentication apparatus having received the first signal, then the control unit provides the first wireless communication unit with a command to transmit a third signal for a connection request with the second address information set in a destination address.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is based upon and claims the benefit of priority fromJapanese Patent Application No. 2012-194160, filed Sep. 4, 2012, theentire contents of which are incorporated herein by reference.

FIELD

Embodiments described herein relate generally to authentication usingwireless communication.

BACKGROUND

At railroad stations or airports, authentication has been carried outusing wireless communication, in order to efficiently manage the entryand exit of passengers. When a passenger holds an IC card, a mobilephone with an IC chip, a ticket with a bar code printed thereon, or thelike up over an automatic ticket gate, whether or not the passenger ispermitted to enter or exit the gate is quickly determined to allow aflap door installed on the automatic ticket gate to open or close.

Furthermore, a technique is known which involves automatic notification,using a second wireless communication scheme, of address informationneeded for communication based on a first wireless communication scheme.Such a technique allows a communication partner to easily identify theaddress information compared to the single use of the first wirelesscommunication scheme to make an attempt to establish connection. On theother hand, such a technique may involve unintentional leakage of theaddress information.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram illustrating a wireless communicationapparatus according to a first embodiment;

FIG. 2 is a block diagram illustrating an authentication apparatusaccording to the first embodiment;

FIG. 3 is a diagram illustrating signals exchanged between the wirelesscommunication apparatus and the authentication apparatus according tothe first embodiment;

FIG. 4 is a diagram illustrating a format of a Probe Request frame;

FIG. 5 is a diagram illustrating the format of a Probe Response frame;

FIG. 6A is a diagram illustrating operation of a control unit of thewireless communication apparatus according to the first embodiment;

FIG. 6B is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 6C is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 6D is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 7A is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 7B is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 7C is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 7D is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 7E is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the first embodiment;

FIG. 8A is a diagram illustrating operation of a control unit of theauthentication apparatus according to the first embodiment;

FIG. 8B is a diagram illustrating operation of the control unit of theauthentication apparatus according to the first embodiment;

FIG. 8C is a diagram illustrating operation of the control unit of theauthentication apparatus according to the first embodiment;

FIG. 8D is a diagram illustrating operation of the control unit of theauthentication apparatus according to the first embodiment;

FIG. 9 is a diagram illustrating signals exchanged between a wirelesscommunication apparatus and an authentication apparatus according to asecond embodiment;

FIG. 10A is a diagram illustrating operation of a control unit of thewireless communication apparatus according to the second embodiment;

FIG. 10B is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 10C is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 10D is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 11A is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 11B is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 11C is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 11D is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 11E is a diagram illustrating operation of the control unit of thewireless communication apparatus according to the second embodiment;

FIG. 12A is a diagram illustrating operation of a control unit of theauthentication apparatus according to the second embodiment;

FIG. 12B is a diagram illustrating operation of the control unit of theauthentication apparatus according to the second embodiment; and

FIG. 12C is a diagram illustrating operation of the control unit of theauthentication apparatus according to the second embodiment.

DETAILED DESCRIPTION

Embodiments will be described below with reference to the drawings.

In general, according to one embodiment, a wireless communicationapparatus includes a first wireless communication unit, a secondwireless communication unit and a control unit. The first wirelesscommunication unit performs communication using a first wirelesscommunication scheme. The second wireless communication unit performscommunication using a second wireless communication scheme. The controlunit controls the first wireless communication unit and the secondwireless communication unit. The control unit provides the secondwireless communication unit with a command to transmit a first signalcontaining first address information assigned to the first wirelesscommunication unit, first identification information specifying adesired system and second identification information specifying anauthentication target. When the control unit is notified of informationin at least one second signal received by either one of the firstwireless communication unit and the second wireless communication unitafter the control unit provides the second wireless communication unitwith the command to transmit the first signal and before a first waitingtime elapses and when the at least one second signal contains secondaddress information assigned to an authentication apparatus havingreceived the first signal, then the control unit provides the firstwireless communication unit with a command to transmit a third signalfor a connection request with the second address information set in adestination address.

In the description below, the term “wireless communication” is broadlyinterpreted. At least display of image information (for example, atwo-dimensional bar code) by one apparatus and reading of the imageinformation by the other apparatus correspond to transmission andreception in “wireless communication”. In this example, a communicationrange can be specified depending on whether or not image information canbe successfully read.

Moreover, elements that are the same as or similar to described elementsare hereinafter denoted by the same or similar reference numerals, withduplicate descriptions basically omitted.

First Embodiment

As illustrated in FIG. 1, a wireless communication apparatus 10according to a first embodiment comprises a control unit 100, a firstwireless communication unit 101, a second wireless communication unit102, and a user interface unit 103.

The wireless communication apparatus 10 may comprise a thirdcommunication unit not shown in the drawings (for example, a functionalunit that carries out radio communication using a public circuit such asa third-generation cellular system). Furthermore, some or all of thefunctions of the user interface unit 103 described below may be omittedas necessary.

The first wireless communication unit 101 carries out communicationbased on a first wireless communication scheme. The first wirelesscommunication scheme corresponds to a middle distance communication suchas a wireless LAN (Local Area Network) but is not limited to this. Inthe description below, the first wireless communication scheme isassumed to correspond to the wireless LAN for simplification.

The first wireless communication unit 101 transmits various signals (forexample, a frame such as a Probe Request frame, an Association Requestframe, and a data frame) in accordance with transmission commands fromthe control unit 100. Furthermore, the first wireless communication unit101 receives various signals (for example, a frame such as a ProbeResponse frame, an Association Response frame, and a data frame) andnotifies the control unit 100 of information in the received signals.The first wireless communication unit 101 may comprise a built-inantenna for wireless LAN communication or may be connected to anexternal antenna.

The second wireless communication unit 102 carries out communicationbased on a second wireless communication scheme. The second wirelesscommunication scheme corresponds to, for example, communication using acontact IC card or a noncontact IC card or close proximity wirelesscommunication such as NFC (Near Field Communication) that is anext-generation standard for the contact or noncontact IC card but isnot limited to this. For example, the second wireless communicationscheme may correspond to communication implemented by displaying orreading a bar code (for example, a QR (Quick Response) code). Here, theclose proximity wireless communication is interchangeable with, forexample, short-distance radio communication or local communication. Thesecond wireless communication scheme typically involves a narrowercommunication range than the first wireless communication scheme.However, such a relation regarding the communication range is notnecessarily required.

The second wireless communication unit 102 transmits signals inaccordance with transmission commands from the control unit 100.Furthermore, the second wireless communication unit 102 may receive acertain signal and notify the control unit 100 of information in thereceived signal. The second wireless communication unit 102 may comprisea built-in antenna or coupler antenna or may be connected to an externalantenna or coupler antenna, as necessary. If the second wirelesscommunication scheme corresponds to communication implemented bydisplaying and reading a bar code, the second wireless communicationunit 102 displays the bar code in accordance with a command from thecontrol unit 100.

The control unit 100 controls the first wireless communication unit 101,the second wireless communication unit 102, and the user interface unit103.

Specifically, in order to control the first wireless communication unit101, the control unit 100 comprises at least elements corresponding toan application layer and a terminal management entity of a wireless LANstation. According to the IEEE 802.11 wireless LAN standard, theterminal management entity is referred to as an SME (Station ManagementEntity). The terminal management entity gives commands to a MAC sublayermanagement entity that manages a media access control (MAC) layer and aPHY sublayer management entity that manages a physical (PHY) layer.

In order to control the first wireless communication unit 101, thecontrol unit 100 may further comprise a MAC sublayer management entityor a PRY sublayer management entity as necessary. According to the IEEE802.11 wireless LAN standard, the MAC sublayer management entity isreferred to as MLME, and the PRY sublayer management entity is referredto as PLME.

Furthermore, in order to control the second wireless communication unit102, the control unit 100 comprises at least elements corresponding toan application layer based on the second wireless communication scheme.In order to control the second wireless communication unit 102, thecontrol unit 100 may further comprise a terminal management entity, aMAC sublayer management entity, or a PHY sublayer management entity asnecessary.

A memory used by the first wireless communication unit 101 may or maynot be shared with the control unit 100. Similarly, a memory used by thesecond wireless communication unit 102 may or may not be shared with thecontrol unit 100. Furthermore, a memory used by the control unit 100 maybe provided inside or outside the control unit 100.

The user interface unit 103 notifies a user of information in accordancewith a command from the control unit 100. Specifically, the userinterface unit 103 can notify the user of the information by, forexample, sound, image, vibration, or with a lighting pattern of a lightemitting element. Furthermore, the user interface unit 103 acquiresinformation from the user and notifies the control unit 100 of theinformation. Specifically, the user interface unit 103 can acquireinformation from the user by, for example, software key operation,hardware key operation, sound, gesture, or image.

As illustrated in FIG. 2, the authentication apparatus 20 according tothe first embodiment comprises a control unit 200, a first wirelesscommunication unit 201, a second wireless communication unit 202, and auser interface unit 203. The authentication apparatus 20 carries outauthentication using wireless communication and may thus be referred toas a wireless communication apparatus 20.

The authentication apparatus 20 corresponds to an automatic ticket gate(or a passage control apparatus) which controls the entry and exit ofpassengers at a railroad station or an airport but is not limited tothis. In the description below, the authentication apparatus 20 isassumed to correspond to an automatic ticket gate for clarification.

The authentication apparatus 20 may comprise a third communication unit(for example, a functional unit that carries out radio communicationusing a public circuit such as a third-generation cellular system).Furthermore, some or all of the functions of the user interface unit 203described below may be omitted as necessary.

The first wireless communication unit 201 carries out communicationbased on the first wireless communication scheme. The first wirelesscommunication unit 201 transmits various signals (for example, a framesuch as a Probe Response frame, an Association Response frame, and adata frame) in accordance with transmission commands from the controlunit 200. Furthermore, the first wireless communication unit 201receives various signals (for example, a frame such as a Probe Requestframe, an Association Request frame, and a data frame) and notifies thecontrol unit 200 of information in the received signals. The firstwireless communication unit 201 may comprise a built-in antenna forwireless LAN communication or may be connected to an external antenna.

The second wireless communication unit 202 carries out communicationbased on the second wireless communication scheme. The second wirelesscommunication unit 202 may receive a signal described below and notifythe control unit 200 of information in the received signal. The secondwireless communication unit 202 may transmit a certain signal inaccordance with a transmission command from the control unit 200. Thesecond wireless communication unit 202 may comprise a built-in antennaor coupler antenna or may be connected to an external antenna or couplerantenna, as necessary. If the second wireless communication schemecorresponds to communication implemented by displaying and reading a barcode, the second wireless communication unit 202 corresponds to a barcode reader.

The control unit 200 controls the first wireless communication unit 201,the second wireless communication unit 202, and the user interface unit203. Moreover, the control unit 200 can communicate directly orindirectly with a server 30 (not shown in the drawings).

Specifically, in order to control the first wireless communication unit201, the control unit 200 comprises at least elements corresponding toan application layer and a terminal management entity of a wireless LANstation (access point). In order to control the first wirelesscommunication unit 201, the control unit 200 may further comprise a MACsublayer management entity or a PHY sublayer management entity asnecessary.

Furthermore, in order to control the second wireless communication unit202, the control unit 200 comprises at least elements corresponding tothe application layer based on the second wireless communication scheme.In order to control the second wireless communication unit 202, thecontrol unit 200 may further comprise a terminal management entity, aMAC sublayer management entity, or a PHY sublayer management entity asnecessary.

A memory used by the first wireless communication unit 201 may or maynot be shared with the control unit 100. Similarly, a memory used by thesecond wireless communication unit 202 may or may not be shared with thecontrol unit 200. Furthermore, a memory used by the control unit 200 maybe provided inside or outside the control unit 200.

Moreover, the control unit 200 can acquire, from the server 30,information necessary for authentication over wireless communication.Examples of the information include identification information (forexample, an SSID (Service Set Identifier)) assigned to the wholewireless communication system formed of one or more authenticationapparatuses including the authentication apparatus 20, andidentification information (for example, a reservation ID and/or ticketinformation described below) which allows an authentication target to beidentified. The SSID is identification information assigned by a systemadministrator to the whole IEEE 802. 11 wireless LAN system operated bythe system administrator. Information identifying the authenticationtarget is provided to the wireless communication apparatus 10 beforehand(for example, when a ticket is purchased).

The user interface unit 203 notifies the user of information inaccordance with a command from the control unit 200. Specifically, theuser interface unit 203 can output information to the user by, forexample, sound, image, vibration, or with a lighting pattern of a lightemitting element. Furthermore, the user interface unit 203 acquiresinformation from the user and notifies the control unit 200 of theinformation. Specifically, the user interface unit 203 can acquireinformation from the user by, for example, software key operation,hardware key operation, sound, gesture, or image.

In particular, if the authentication apparatus 20 corresponds to anautomatic ticket gate, the user interface unit 203 may comprise a flapdoor that opens or closes depending on whether or not the passenger ispermitted to enter or exit the gate (i.e., an authentication result foran SSID, a reservation ID, or ticket information received from thewireless communication apparatus 10). Furthermore, the user interfaceunit 203 may display an image or output a sound in order to allow thepassenger to recognize whether or not the passenger is permitted toenter or exit the gate.

The description below assumes a use case where the wirelesscommunication apparatus 10 executes a certain application to behave as aticket (for example, a limited express ticket, a railroad ticket, or anair ticket) corresponding to an authentication target and where the usercarrying the wireless communication apparatus 10 passes through theauthentication apparatus 20 corresponding to an automatic ticket gate.

It is assumed that the user has already purchased a ticket and thatidentification information necessary to pass through the authenticationapparatus 20 has been saved in the wireless communication apparatus 10via the server 30. The information includes, for example, an SSIDassigned to the whole wireless LAN system formed of one or moreauthentication apparatuses (typically, a plurality of adjacentlydisposed automatic ticket gates) including the authentication apparatus20. Moreover, the information includes a reservation ID corresponding toidentification information uniquely assigned to a ticket (i.e., anauthentication target) and ticket information indicative of details ofthe ticket (i.e., the authentication target) specified by thereservation ID.

The SSID may be changed, for example, every day or at every time period.In such a case, the SSID corresponding to the date and time when theticket is scheduled to be used are saved by the wireless communicationapparatus 10. When the SSID is fixed, the following problem, forexample, may occur.

An SSID previously saved to allow the corresponding ticket to be usedmay remain undeleted even after the use of the ticket, and the wirelesscommunication apparatus 10 may enter a wireless LAN area provided by theauthentication apparatus 20. In this case, the wireless communicationapparatus 10 may recognize the authentication apparatus 20 as a normalwireless LAN access point (base station) and attempt to connect to theauthentication apparatus 20 for wireless LAN communication. The ticketassociated with the SSID has already been used, and thus the wirelesscommunication apparatus 10 cannot connect to the authenticationapparatus 20. However, during the attempt to make connection, uselessframes are exchanged with one another. The exchange of useless framesmay consume communication capacity, which prevents other users fromusing appropriate tickets (for example, a time needed for authenticationmay be increased).

Such problems can be avoided by appropriately designing the wirelesscommunication apparatus 10. Specifically, the wireless communicationapparatus 10 may delete the SSID temporarily saved to use the ticket,after the use of the ticket.

The authentication apparatus 20 acquires the SSID from the server 30,for example, every day or at every time period and hold the SSID.Moreover, the authentication apparatus 20 acquires a plurality ofacceptable reservation IDs, for example, every day or at every timeperiod and holds the plurality of acceptable reservation IDs. If thecommunication between the authentication apparatus 20 and the server 30is sufficiently fast, the communication only insignificantly affects atime required to authenticate the wireless communication apparatus 10.Thus, the authentication apparatus 20 may inquire, in real time, of theserver 30 whether or not the reservation ID received from the wirelesscommunication apparatus 10 is acceptable.

FIG. 3 illustrates signals exchanged between the wireless communicationapparatus 10 and the authentication apparatus 20 according to thepresent embodiment. In FIG. 3, STA is an abbreviation for “station” andrepresents the wireless communication apparatus 10. Similarly, AP is anabbreviation for “access point” and represents the authenticationapparatus 20.

First, for example, the user operates the user interface unit 103 of thewireless communication apparatus 10 to execute a certain application inthe control unit 100 of the wireless communication apparatus 10. Theapplication may be executed based on a condition different from the useroperation. Specifically, the application may be executed on thecondition that the wireless communication apparatus 10 has entered acommunication area based on the second wireless communication schemeprovided by the authentication apparatus 20.

When the application is executed, the control unit 100 provides thesecond wireless communication unit 102 with a command to transmit asignal (S301). The signal (S301) contains the SSID, the reservation ID,and address information assigned to the first wireless communicationunit 101. The signal (S301) is received by the second wirelesscommunication unit 202.

The address information assigned to the first wireless communicationunit 101 is, for example, a MAC address used by the first wirelesscommunication unit 101. The MAC address means the address of a MACentity used in a wireless LAN system and is designated as a sourceaddress of a frame transmitted by the first wireless communication unit101. The source address is also referred to as a TA (transmitter addressor transmitting STA address).

The second wireless communication unit 202 notifies the control unit 200of information in the signal (S301). The control unit 200 checks thesignal (S301) for consistency. Specifically, the control unit 200determines whether or not the SSID contained in the signal (S301)matches the SSID designated by the server 30. Moreover, the control unit200 determines whether or not the reservation ID contained in the signal(S301) matches any of the plurality of acceptable reservation IDsdesignated by the server 30. If both the SSID and reservation IDcontained in the signal (S301) are appropriate, the authenticationapparatus 20 continues the authentication process. On the other hand, ifat least one of the SSID and reservation ID contained in the signal(S301) is inappropriate, the authentication apparatus 20 discontinuesthe authentication process (rejects authentication), and for example,closes the flap door and displays an image indicating that the passageis rejected.

After the transmission of the signal (S301), the control unit 100provides the first wireless communication unit 101 a command to transmita signal (S302) for scanning a wireless LAN system formed by theauthentication apparatus 20. The signal (S302) is referred to as a ProbeRequest frame according to the IEEE 802.11 wireless LAN standard. TheProbe Request frame is a type of management frame which is included inMAC frames.

According to the IEEE 802.11 wireless LAN standard, a MAC framegenerally contains a MAC header, a frame body, and an FCS (Frame CheckSequence). The MAC header of the Probe Request frame contains, forexample, a destination address field, a source address field, and aBSSID field. According to the IEEE 802.11 wireless LAN standard, thedestination address is also referred to as the DA. According to the IEEE802.11 wireless LAN standard, the source address is also referred to asthe SA. However, in the management frame, the SA is generally equal tothe TA, described above.

FIG. 4 illustrates the format of the Probe Request frame (S302).According to the format in FIG. 4, the control unit 100 needs to set adestination address field, a source address field, and a BSSID field inthe MAC header, and to set an SSID and a reservation ID in the framebody.

In general, it is difficult to identify, at the time of the purchase ofthe ticket, the authentication apparatus 20 through which the user is topass using the ticket. Hence, the control unit 100 may set a broadcastaddress in the destination address field of the Probe Request frame(S302). The broadcast address means an address that does not specify anydestination. A frame with a broadcast address set in the destinationaddress is referred to as a broadcast frame.

If the authentication apparatus 20 through which the user passes usingthe ticket can be identified at the time of the purchase of the ticket,the control unit 100 may set address information (typically a MACaddress) assigned to the first wireless communication unit 201 of theauthentication apparatus 20, in the destination address field of theProbe Request frame (S302). The address information may be acquiredtogether with the SSID and the reservation ID or at the time of theinstallation of the above-described application.

The control unit 100 sets the source address field of the Probe Requestframe (S302) to the MAC address of the first wireless communication unit101 which was also contained in the signal (S301).

According to the IEEE 802.11 wireless LAN standard, in general, the MACaddress of an access point is equal to the BSSID. That is, if thedestination address is not specified, the BSSID is also not specified.Hence, the control unit 100 may set a wildcard BSSID in the BSSID fieldof the Probe Request frame (S302). According to the IEEE 802.11 wirelessLAN standard, setting the BSSID field to the wildcard BSSID meansdesignating no particular BSSID, or in other words, covering all BSSIDs.

If the authentication apparatus 20 through which the user passes usingthe ticket can be identified at the time of the purchase of the ticket,the control unit 100 may set the BSSID field of the Probe Request frame(S302) to the MAC address of the first wireless communication unit 201of the authentication apparatus 20.

Here, the BSSID is identification information allowing identification ofa BSS (Basic Service Set) corresponding to a subgroup of a wireless LANcommunication system specified by the above-described SSID. The BSSmeans, for example, a group formed of one access point and one or morewireless communication apparatuses connected to the access point. Inother words, the BSS means a group formed of a plurality of wirelesscommunication apparatuses (including an access point) which usesynchronized timers. According to the IEEE 802.11 wireless LAN standard,the BSSID identifying a BSS which is formed centering on an accesspoint, i.e., an infrastructure BSS, is equal to the MAC address of theaccess point.

The control unit 100 sets an SSID in the frame body of the Probe Requestframe (S302), in the same way as the general Probe Request frame.Moreover, the control unit 100 sets a reservation ID in the frame bodyof the Probe Request frame (S302). The SSID and the reservation ID arethe same with the SSID and reservation ID contained in the signal(S301).

The IEEE 802.11 wireless LAN standard provides an IE (InformationElement) to allow various pieces of information to be set in the framebody of a management frame. The IE contains an Element ID field, aLength field, and an Information field. Information indicative of thetype of the IE is set in the Element ID field. Information indicative ofthe length of the Information field is set in the Length field. Desiredinformation is set in the Information field. Moreover, the IEEE 802.11wireless LAN standard provides a vender specific IE that is a type ofIE. Thus, the control unit 100 may use the vender specific IE to notifya reservation ID. Alternatively, a new Element ID value may be definedto allow a reservation ID to be notified.

The Probe Request frame (S302) is received by the first wirelesscommunication unit 201. The first wireless communication unit 201determines whether or not the destination address in the Probe Requestframe (S302) is appropriate. The appropriate destination address meansthat the value set in the destination address matches the MAC address ofthe first wireless communication unit 201. Here, the MAC address of thefirst wireless communication unit 201 itself and the broadcast addressmatch the MAC address of the first wireless communication unit 201. Ifthe destination address in the Probe Request frame (S302) isappropriate, the first wireless communication unit 201 continues thereception process. The first wireless communication unit 201 notifiesthe control unit 200 of the information in the Probe Request frame(S302).

The control unit 200 checks the Probe Request frame (S302) for itsconsistency. Specifically, the control unit 200 determines whether ornot the value set in the source address field of the Probe Request frame(S302) matches the MAC address of the first wireless communication unit101 contained in the signal (S301). Moreover, the control unit 200determines whether or not the SSID and reservation ID set in the framebody of the Probe Request frame (S302) match the SSID and reservation IDcontained in the signal (S301) (in other words, the SSID and reservationID acquired from the server 30). If the source address, SSID, andreservation ID contained in the Probe Request frame (S302) match thesource address, SSID, and reservation ID contained in the signal (S301),respectively, the control unit 200 provides the first wirelesscommunication unit 201 with a command to transmit a signal (S303) for aresponse to the Probe Request frame (S302). On the other hand, if atleast one of the source address, SSID, and reservation ID contained inthe Probe Request frame (S302) fails to match the corresponding one ofthe source address, SSID, and reservation ID contained in the signal(S301), the control unit 200 does not provide the first wirelesscommunication unit 201 with the command to transmit the signal (S303).

The control unit 200 may check the BSSID in addition to the sourceaddress, the SSID, and the reservation ID. Specifically, the controlunit 200 determines whether or not the BSSID contained in the ProbeRequest frame (S302) is equal to a desired value. For example, it isassumed that a wildcard BSSID is expected to be set in the BSSID in theProbe Request frame (S302). Under this assumption, if a value other thanthe wild card BSSID is set in the BSSID, the control unit 200 does notprovide the first wireless communication unit 201 with the command totransmit the signal (S303).

The signal (S303) is referred to as a Probe Response frame according tothe IEEE 802.11 wireless LAN standard. The Probe Response frame (S303)is a type of management frame included in the MAC frames.

FIG. 5 illustrates the format of the Probe Response frame (S303).According to the format in FIG. 5, the control unit 200 needs to set adestination address, a source address, and a BSSID in the MAC header andto set an SSID in the frame body.

The control unit 200 sets the MAC address of the first wirelesscommunication unit 101 in the destination address field of the ProbeResponse frame (S303). The MAC address of the first wirelesscommunication unit 101 can be acquired from the Probe Request frame(S302) and the signal (S301).

The control unit 200 sets the MAC address of the first wirelesscommunication unit 201 in the source address field of the Probe Responseframe (S303). When the authentication apparatus 20 is assumed to form aninfrastructure BSS as described above, the BSSID of the infrastructureBSS matches the MAC address of the first wireless communication unit201. Hence, the control unit 200 sets the MAC address of the firstwireless communication unit 201 in the BSSID field of the Probe Responseframe (S303).

The control unit 200 sets an SSID in the frame body of the ProbeResponse frame (S303). The SSID can be acquired from the server 30, fromthe Probe Request frame (S302), and from the signal (S301). To allow thewireless communication apparatus 10 to reconfirm that the authenticationapparatus 20 is a wireless LAN access point set to handle the tickets,the control unit 200 may further set a reservation ID in the frame bodyof the Probe Response frame (S303). The reservation ID can be acquiredfrom the server 30, from the Probe Request frame (S302), and from thesignal (S301).

The Probe Response frame (S303) is received by the first wirelesscommunication unit 101. The first wireless communication unit 101determines whether or not the destination address in the Probe Responseframe (S303) is appropriate. The appropriate destination address meansthat the value set in the destination address matches the MAC address ofthe first wireless communication unit 101. If the destination address inthe Probe Response frame (S303) is appropriate, the first wirelesscommunication unit 101 continues the reception process. The firstwireless communication unit 201 notifies the control unit 100 of theinformation in the Probe Response frame (S303).

When notified of the information in the Probe Response frame (S303), thecontrol unit 100 provides the first wireless communication unit 101 witha command to transmit a signal (S304) for a request for connection to awireless LAN system formed by the authentication apparatus 20.

The signal (304) is referred to as an Association Request frameaccording to the IEEE 802.11 wireless LAN standard. The AssociationRequest frame is a type of management frame included in the MAC frames.

The format of the Association Request frame (S304) is similar to theformats of the Probe Request frame (S302) and the Probe Response frame(S303) (that is, the formats shown in FIG. 4 and FIG. 5). Specifically,the control unit 100 needs to set a destination address, a sourceaddress, and a BSSID in the MAC header and to set an SSID in the framebody. The frame format of the Association Request frame (S304) may bedesigned to allow a reservation ID to be further set in the frame body.

The control unit 100 sets the MAC address of the first wirelesscommunication unit 201 in the destination address field and BSSID fieldof the Association Request frame (S304). The MAC address of the firstwireless communication unit 201 can be acquired from the Probe Responseframe (S303).

The control unit 100 sets the MAC address of the first wirelesscommunication unit 101 in the source address field of the AssociationRequest frame (S304). The control unit 100 sets an SSID in the framebody of the Association Request frame (S304). The SSID can be acquiredfrom the server 30 (at the time of the purchase of the ticket) and fromthe Probe Response frame (S303).

The Association Request frame (S304) is received by the first wirelesscommunication unit 201. The first wireless communication unit 201determines whether or not the destination address in the AssociationRequest frame (S304) is appropriate. If the destination address in theAssociation Request frame (S304) is appropriate, the first wirelesscommunication unit 201 continues the reception process. The firstwireless communication unit 201 notifies the control unit 200 of theinformation in the Association Request frame (S304).

The control unit 200 checks the Association Request frame (S304) for itsconsistency. Specifically, the control unit 200 determines whether ornot the value set in the source address field of the Association Requestframe (S304) matches the MAC address of the first wireless communicationunit 101 contained in the Probe Request frame (S302). The control unit200 then provides the first wireless communication unit 201 with acommand to transmit a signal (S305) for a response to the AssociationRequest frame (S304).

A value indicating whether the connection request is to be accepted orrejected based on the Association Request frame (S304) is set in thesignal (S305). Specifically, if the value set in the source addressfield of the Association Request frame (S304) matches the MAC address ofthe first wireless communication unit 101 contained in the Probe Requestframe (S302), the control unit 200 sets a value indicating that theconnection request is to be accepted, in the signal (S305). On the otherhand, if the value set in the source address field of the AssociationRequest frame (S304) fails to match the MAC address of the firstwireless communication unit 101 contained in the Probe Request frame(S302), the control unit 200 sets a value indicating that the connectionrequest is to be rejected, in the signal (S305).

The control unit 200 may determine whether the connection request is tobe accepted or rejected based on the consistency of the SSID in additionto the source address. For example, if the SSID set in the frame body ofthe Association Request frame (S304) fails to match the SSID containedin the Probe Request frame (S302), the control unit 200 may set thevalue indicating that the connection request is to be rejected, in thesignal (S305). Furthermore, the control unit 200 may determine whetherthe connection request is to be accepted or rejected based on theconsistency of the reservation ID in addition to the source address. Forexample, if the reservation ID set in the frame body of the AssociationRequest frame (S304) fails to match the reservation ID contained in theProbe Request frame (S302), the control unit 200 may set the valueindicating that the connection request is to be rejected, in the signal(S305).

The signal (S305) is referred to as an Association Response frameaccording to the IEEE 802.11 wireless LAN standard. The AssociationResponse frame is a type of management frame included in the MAC frames.

The format of the Association Response frame (S305) is similar to theabove-described formats of the Probe Request frame (S302) and the ProbeResponse frame (S303) (that is, the formats illustrated in FIG. 4 andFIG. 5). Specifically, the control unit 200 needs to set a destinationaddress, a source address, and a BSSID in the MAC header and to set avalue indicating whether the connection request is to be accepted orrejected, in a status code field carried in the frame body.

The control unit 200 sets the MAC address of the first wirelesscommunication unit 101 in the destination address field of theAssociation Response frame (S305). The MAC address of the first wirelesscommunication unit 101 can be acquired from the Association Requestframe (S304), the Probe Request frame (S302), and the signal (S301).

The control unit 200 sets the MAC address of the first wirelesscommunication unit 201 in the source address field and BSSID field ofthe Association Response frame (S305). The control unit 200 sets thevalue indicating whether the connection request is to be accepted orrejected, in the status code field carried in the frame body of theAssociation Response frame (S305). For example, if the connectionrequest is to be accepted, the control unit 200 sets “0” (that is,successful) in the status code field. If the connection request is to berejected, the control unit 200 sets a value other than “0” in the statuscode field. A new status code value indicating that the connectionrequest is to be rejected may be defined.

The Association Response frame (S305) is received by the first wirelesscommunication unit 101. The first wireless communication unit 101determines whether or not the destination address in the AssociationResponse frame (S305) is appropriate. If the destination address in theAssociation Response frame (S305) is appropriate, the first wirelesscommunication unit 101 continues the reception process. The firstwireless communication unit 101 notifies the control unit 100 of theinformation in the Association Response frame (S305).

The control unit 100 determines whether the connection request isaccepted or rejected based on the status code in the AssociationResponse frame (S305). If the connection request is accepted, exchangeof data frames is started between the wireless communication apparatus10 and the authentication apparatus 20 via the wireless LAN.

The control unit 100 may provide the first wireless communication unit101 with a command to transmit an acknowledgement to the AssociationResponse frame (S305) as necessary. Then, the control unit 200 may startthe exchange of data frames after the acknowledgement is received viathe first wireless communication unit 201 or after the control unit 200is notified that the transmission of the Association Response frame(S305) is completed based on the reception of the acknowledgement.

Furthermore, security may be set before the exchange of data framesbased on data generated in the application layer. The security may beset after the Association Request frame (S304) and the AssociationResponse frame (S305) are exchanged. A certain type of security is setthrough the exchange of data frames at the MAC layer level of thewireless LAN.

Alternatively, various signals (that is, the signal (S301) to the frame(S305)) exchanged between the wireless communication apparatus 10 andthe authentication apparatus 20 may contain information required to setthe security. The wireless communication apparatus 10 and theauthentication apparatus 20 can set the security based on theinformation contained in the received signals.

After the exchange of data frames is started, the control unit 100provides the first wireless communication unit 101 with a command totransmit a data frame containing ticket information indicative of thedetails of the ticket to be used (for example, purchase information andpassenger ticket information).

The first wireless communication unit 201 receives the data framecontaining the ticket information, and notifies the control unit 200 ofthe information in the received data frame. The control unit 200determines whether or not the ticket information contained in thereceived data frame is appropriate. The control unit 200 provides thefirst wireless communication unit 201 with a command to transmit a dataframe containing a value indicative of a determination result (that is,information indicating whether or not the ticket information issuccessfully authenticated). Moreover, the control unit 200 may transmitthe ticket information and the value indicative of the determinationresult to the server 30 as entry and exit management information on theuser of the wireless communication apparatus 10.

Furthermore, the control unit 200 controls the user interface unit 203in accordance with the determination result. For example, if the ticketinformation is appropriate, the user interface unit 203 opens the flapdoor and displays an image indicating that passage is accepted. On theother hand, if the ticket information is not appropriate, the userinterface unit 203 closes the flap door and displays an image indicatingthat the passage is rejected. That is, the authentication apparatus 20uses the ticket information as a piece of authentication information toalso achieve authentication at the level of data frame exchange.

The first wireless communication unit 101 receives the data framecontaining the determination result and notifies the control unit 100 ofthe information in the received data frame. The control unit 100 maynotify the user of the determination result via the user interface unit103. Furthermore, the control unit 100 may save a value indicative ofthe determination result to the memory in association with the ticketinformation.

The exchange of data frames may be utilized not only for theabove-described authentication but also to distribute contents oradvertisements. Specifically, even after the user of the wirelesscommunication apparatus 10 passes through the authentication apparatus20, the user is not immediately disconnected from the wireless LAN, andthus the authentication apparatus 20 can provide service to the userutilizing an excess communication capacity.

The details of operation of the control unit 100 provided in thewireless communication apparatus 10 according to the present embodimentcan be described using a specification and description language (SDL) asillustrated in FIG. 6A, FIG. 6B, FIG. 6C, and FIG. 6D.

In the description below, it is assumed that the terminal managemententity provided in the control unit 100 gives commands to the MACsublayer management entity to allow the first wireless communicationunit 101 to be controlled.

In the example illustrated in FIG. 6A, FIG. 65, FIG. 6C, and FIG. 6D, itis assumed that the second wireless communication scheme does notprovide a mechanism for directly confirming that communication iscompleted. For example, the second wireless communication schemecorresponds to communication implemented by displaying and reading a barcode. However, when notified of the information in the Probe Responseframe from the appropriate access point, the control unit 100 canindirectly confirm that the communication based on the second wirelesscommunication scheme is completed.

FIG. 6A shows inputs to and outputs from the control unit 100 andinternal processing by the control unit 100 during transition from anIdle state (ST401) to a Scan Cfm Wait state (ST402).

FIG. 6A shows a process start symbol. In the SDL, the process startsymbol is used to represent the start of the process. That is, as shownin FIG. 6A, when the process is started, the control unit 100 shifts tothe Idle state (ST401). The process start symbol drawn in other drawingshas a similar meaning.

In the Idle state (ST401), for example, the control unit 100 is notifiedof a command to start an application (a Ticket Gate Application Startcommand in FIG. 6A) based on an operation on the user interface unit203. The control unit 100 provides the second wireless communicationunit 102 with a command to transmit a signal (Touch Info in FIG. 6A).Touch Info includes an SSID, a reservation ID, and the MAC address ofthe first wireless communication unit 101.

Moreover, the control unit 100 provides the first wireless communicationunit 101 with a command to transmit the Probe Request frame (a Probe ReqTx command in FIG. 6A). The control unit 100 sets the maximum time forwaiting for the Probe Response frame in a timer (T_AppEnd in FIG. 6A),and shifts to the Scan Cfm Wait state (ST402).

The Probe Request frame may be iteratively transmitted at least twice.For example, the control unit 100 iteratively provides the firstwireless communication unit 101 with a command to transmit the ProbeRequest frame.

FIG. 6B shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Scan Cfm Wait state (ST402)to an Asoc Cfm Wait state (ST403) or the Idle state (ST401). Moreover,FIG. 6B shows an output from the control unit 100 during a transition ofthe control unit 100 from an NG label (LA405) to the Idle state (ST401).

In the Scan Cfm Wait state (ST402), the control unit 100 waits to benotified, by the first wireless communication unit 101, of theinformation of a scan result including the information extracted from aProbe Response frame if the Probe Response frame is received (Scan CfmInfo in FIG. 6B).

In general, the maximum time to spend on each channel when scanning isset in the command (corresponding to an MLME-SCAN.request primitiveaccording to the IEEE 802.11 wireless LAN standard) to transmit theProbe Request frame. The wireless communication unit 101 waits tocollect Probe Response frames on each of the channels, which are alsospecified in the command, until the maximum time elapses. The channelsto be scanned may be provided to the wireless communication apparatus 10beforehand (for example, when a ticket is purchased). For a fastconnection setup, it may be desirable to limit the number of channels tobe scanned as possible, such as to one. Even if the maximum time elapsesbefore the wireless communication unit 101 receives no Probe Responseframes on the channel, the wireless communication unit 101 needs tochange to the next specified channel. And finally, even if there were noProbe Response frames received on any of the specified channels, thewireless communication unit 101 needs to notify the control unit 100 ofinformation indicative of receiving no Probe Response frames. That is,regardless of whether or not receiving a Probe Response frame, thewireless communication unit 101 notifies the control unit 100 ofinformation concerning the scan result (Scan Cfm Info in FIG. 6B;corresponding to an MLME-SCAN.confirm primitive according to the IEEE802.11 wireless LAN standard).

When notified of Scan Cfm Info, the control unit 100 determines whetheror not the Probe Response frame has been received from the appropriateaccess point (authentication apparatus 20). If the Probe Response framehas been received from the appropriate access point, the control unit100 provides the first wireless communication unit 101 with commands tosynchronize with a BSS specified by a BSSID equal to the MAC address ofthe access point and to transmit the Association Request frame to theaccess point (a Join and Asoc Req Tx command in FIG. 6B). The controlunit 100 then shifts to the Asoc Cfm Wait state (ST403).

In FIG. 6B, the synchronization command and the command to transmit theAssociation Request frame appear to be simultaneously provided to thefirst wireless communication unit 101. However, strictly speaking, thecontrol unit 100 provides the synchronization command to the firstwireless communication unit 101, and after being notified of informationindicating that the synchronization is completed, provides the firstwireless communication unit 101 with a command to transmit theAssociation Request frame.

Here, the synchronization means a process of synchronizing a timer ofthe first wireless communication unit 101 with a timer of the BSSspecified by the designated BSSID. The value of the timer of the BSS iscontained in a Beacon frame or the Probe Response frame transmitted bythe access point forming the BSS. Specifically, according to the IEEE802.11 wireless LAN standard, the timer value is set in a Timestampfield of these frames.

If the access point has transmitted the Beacon frame, the control unit101 may receive the Beacon frame and synthesize with the BSS based onthe timer value contained in the received Beacon frame. On the otherhand, if the access point has not transmitted the Beacon frame, thecontrol unit 100 may provide the first wireless communication unit 101with a command to transmit the Probe Request frame again in order tourge the access point to transmit the Probe Response frame. The firstwireless communication unit 101 may receive the Probe Response frame andsynchronize with the BSS based on the timer value contained in thereceived Probe Response frame.

At the NG label (LA405), the control unit 100 notifies the user ofinformation indicative of authentication rejection on the application(NG in FIG. 6B) via the user interface unit 103 and then shifts to theIdle state (ST401). If the timer (T_AppEnd in FIG. 6B) times out withoutnotification of Scan Cfm Info from the first wireless communication unit101 or the Probe Response frame has not been received from theappropriate access point, the control unit 100 performs an operationthat is the same as or similar to the operation performed at the NGlabel (LA405).

FIG. 6C shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Asoc Cfm Wait state (ST403)to an Acceptance Wait state (ST404) or the NG label (LA405).

In the Asoc Cfm Wait state (ST403), the control unit 100 waits to benotified of the information in the Association Response frame by thefirst wireless communication unit 101. In general, the maximum waitingtime for the Association Response frame is set in the command(corresponding to an MLME-ASSOCIATE.request primitive according to theIEEE 802.11 wireless LAN standard) to transmit the Association Requestframe.

The wireless communication unit 101 waits for the Association Responseframe from the desired access point until the maximum waiting timeelapses. If the wireless communication unit 101 receives the AssociationResponse frame from the desired access point before the maximum waitingtime elapses, the wireless communication unit 101 notifies the controlunit 100 of the information in the received Association Response frame.Moreover, even if the maximum waiting time elapses before the wirelesscommunication unit 101 receives the Association Response frame from thedesired access point, the wireless communication unit 101 needs tonotify the control unit 100 of information indicative of a failure toreceive the Association Response frame.

That is, regardless of whether or not the Association Response frame issuccessfully received, the wireless communication unit 101 notifies thecontrol unit 100 of information concerning the Association Responseframe (Asoc Cfm Info in FIG. 6C; corresponding to anMLME-ASSOCIATE.confirm primitive according to the IEEE 802.11 wirelessLAN standard). The information includes a code (a result code in FIG.6C) indicative of a result for the command to transmit the AssociationRequest frame. The control unit 100 can determine whether or theconnection request has been accepted based on the value set in theresult code.

Specifically, if the first wireless communication unit 101 has receivedthe Association Response frame from the desired access point, theabove-described status code is converted into the result code. Forexample, if “0” (successful) is set in the status code, Success is setin the result code. On the other hand, if a value other than “0” is setin the status code, a value other than Success is set in the resultcode. If the Association Response frame has failed to be received, thevalue other than Success is also set in the result code.

Success set in the result code allows the control unit 100 to confirmthat the connection request has been accepted. Then, the control unit100 provides the first wireless communication unit 101 with a command totransmit a data frame containing the ticket information (Ticket Info inFIG. 6C) and shifts to the Acceptance Wait state (ST404). On the otherhand, the value other than Success set in the result code allows thecontrol unit 100 to shift to the NG label (LA405).

FIG. 6D shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Acceptance Wait state(ST404) to the Idle state (ST401) or the NG label (LA405).

In the Acceptance Wait state (ST404), the control unit 100 waits for anauthentication result for the transmitted ticket information. If theauthentication apparatus 20 determines the transmitted ticketinformation to be appropriate, the control unit 100 is notified ofinformation indicating that the passage is accepted (Acceptance in FIG.6D). Then, the control unit 100 notifies the user of informationindicative of authentication acceptance on the application (OK in FIG.6D) via the user interface unit 103 and then shifts to the Idle state(ST401). On the other hand, if the authentication apparatus 20determines the transmitted ticket information not to be appropriate, thecontrol unit 100 is notified of information indicating that the passageis rejected (Rejection in FIG. 6D). The control unit 100 then shifts tothe NG label (LA405).

As described above, in the example illustrated in FIG. 6A, FIG. 6B, FIG.6C, and FIG. 6D, it is assumed that the second wireless communicationscheme does not provide a mechanism for directly confirming thatcommunication is completed. If a mechanism is provided which allowsdirect confirmation of completion of communication in the secondwireless communication scheme, the control unit 100 may operate asillustrated in FIG. 7A, FIG. 7B, FIG. 7C, FIG. 7D, and FIG. 7E insteadof FIG. 6A, FIG. 6B, FIG. 6C, and FIG. 6D.

FIG. 7A shows inputs to and outputs from the control unit 100 andinternal processing by the control unit 100 during a transition of thecontrol unit 100 from an Idle state (ST501) to a Touch Wait state(ST502).

In the Idle state (ST501), for example, the control unit 100 is notifiedof a command to start the application (the Ticket Gate Application Startcommand in FIG. 7A) based on an operation on the user interface unit103. The control unit 100 provides the second wireless communicationunit 102 with a command to transmit a signal (Touch Info in FIG. 7A).Touch Info includes an SSID, a reservation ID, and the MAC address ofthe first wireless communication unit 101.

Moreover, the control unit 100 sets the maximum time for waiting for theProbe Response frame in the timer (T_AppEnd in FIG. 7A), and shifts to aTouch Wait state (ST502).

FIG. 7B shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Touch Wait state (ST502) toa Scan Cfm Wait state (ST503) or the Idle state (ST501). Moreover, FIG.7B shows outputs from the control unit 100 during a transition of thecontrol unit 100 from an NG label (LA506) to the Idle state (ST501).

In the Touch Wait state (ST502), the control unit 100 waits to benotified, by the second wireless communication unit 102, of informationindicating that the communication of Touch Info is completed (TouchComplete in FIG. 7B).

When notified of Touch Complete, the control unit 100 provides the firstwireless communication unit 101 with a command to transmit the ProbeRequest frame (a Probe Req Tx command in FIG. 7B), and shifts to a ScanCfm Wait state (ST503).

At the NG label (LA506), the control unit 100 notifies the user ofinformation indicative of authentication rejection on the application(NG in FIG. 7B) via the user interface unit 103 and then shifts to theIdle state (ST501). If the timer (T_AppEnd in FIG. 7B) times out withoutnotification of Touch Complete from the second wireless communicationunit 102, the control unit 100 performs an operation that is the same asor similar to the operation performed at the NG label (LA506).

FIG. 7C shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Scan Cfm Wait state (ST503)to an Asoc Cfm Wait state (ST504) or the NG label (LA506).

In the Scan Cfm Wait state (ST503), the control unit 100 waits to benotified of the information of a scan result including the informationextracted from a Probe Response frame if the Probe Response frame isreceived (Scan Cfm Info in FIG. 7C) by the first wireless communicationunit 101.

When notified of Scan Cfm Info, the control unit 100 determines whetheror not the Probe Response frame has been received from the appropriateaccess point (authentication apparatus 20). If the Probe Response framehas been received from the appropriate access point, the control unit100 provides the first wireless communication unit 101 with commands tosynchronize with a BSS specified by a BSSID equal to the MAC address ofthe access point and to transmit the Association Request frame to theaccess point (the Join and Asoc Req Tx command in FIG. 7C). The controlunit 100 then shifts to the Asoc Cfm Wait state (ST504). On the otherhand, if the Probe Response frame has not been received from theappropriate access point, then the control unit 100 shifts to the NGlabel (LA506).

FIG. 7D shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Asoc Cfm Wait state (ST504)to an Acceptance Wait state (ST505) or the NG label (LA506). FIG. 7Dillustrates operations that are the same as or similar to the operationsillustrated in FIG. 6C and will thus not be described below.

FIG. 7E shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Acceptance Wait state(ST505) to the Idle state (ST501) or the NG label (LA506). FIG. 7Eillustrates operations that are the same as or similar to the operationsillustrated in FIG. 6D and will thus not be described below.

The details of operation of the control unit 200 provided in theauthentication apparatus 20 according to the present embodiment can bedescribed using the SDL as illustrated in FIG. 8A, FIG. 8B, FIG. 8C, andFIG. 8D.

In the description below, it is assumed that the terminal managemententity provided in the control unit 200 gives commands to the MACsublayer management entity to allow the first wireless communicationunit 201 to be controlled.

FIG. 8A shows inputs to and outputs from the control unit 200 andinternal processing by the control unit 200 during a transition of thecontrol unit 200 from an Idle state (ST601) to a Probe Req Wait state(ST602) or the Idle state (ST601). Moreover, FIG. 8A shows an outputfrom the control unit 200 during a transition of the control unit 200from an NG label (LA605) to the Idle state (ST601).

In the Idle state (ST601), the control unit 200 is notified, by thesecond wireless communication unit 202, of the information in the signalreceived by the second wireless communication unit 202 (Touch Info inFIG. 8A). Touch Info includes an SSID, a reservation ID, and the MACaddress of the first wireless communication unit 101.

When notified of Touch Info, the control unit 200 determines whether ornot Touch Info matches the information acquired from the server 30(Server Info). If Touch Info matches Server Info, the control unit 200sets the maximum time for waiting for the Probe Request frame, in atimer (T_ProbeReq in FIG. 8A), and shifts to the Probe Req Wait state(ST602).

Server Info includes an SSID and a plurality of acceptable reservationIDs. The match between Touch Info and Server Info means that the SSIDincluded in Touch Info matches the SSID included in Server Info and thatthe reservation ID included in Touch Info matches one of the pluralityof acceptable reservation IDs included in Server Info.

At the NG label (LA605), the control unit 200 notifies the user ofinformation indicative of authentication rejection on the application(NG in FIG. 8A) via the user interface unit 203 and then shifts to theIdle state (ST601). For example, the user interface unit 203 closes theflap door and displays an image indicating that the passage is rejected.

If Touch Info fails to match Server Info, the control unit 200 performsan operation that is the same as or similar to the operation performedat the NG label (LA605). Moreover, the control unit 200 may perform anoperation that is the same as or similar to the operation performed atthe NG label (LA605) if passage of a human being is detected withoutnotification of Touch Info.

FIG. 8B shows inputs to and outputs from the control unit 200 andinternal processing by the control unit 200 during a transition of thecontrol unit 200 from the Probe Req Wait state (ST602) to an Asoc ReqWait state (ST603), a Probe Req Wait state (ST602), or the NG label(LA605).

In the Probe Req Wait state (ST602), the control unit 200 waits to benotified of the information in the Probe Request frame (Probe Req Infoin FIG. 8B) by the first wireless communication unit 201.

When notified of Probe Req Info, the control unit 200 determines whetherProbe Req Info matches Touch Info. A match between Probe Req Info andTouch Info means that the value set in the source address in Probe ReqInfo matches the MAC address of the first wireless communication unit101 included in Touch Info and that the SSID and reservation ID includedin Probe Req Info match the SSID and reservation ID included in TouchInfo.

If Probe Req Info matches Touch Info, the control unit 200 sets themaximum time for waiting for the Association Request frame, in a timer(T_AsocReq in FIG. 8B). Moreover, the control unit 200 provides thefirst wireless communication unit 201 with a command to transmit theProbe Response frame to the desired wireless communication apparatus 10(a Probe Rsp Tx command in FIG. 8B). The control unit 200 then shifts tothe Asoc Req Wait state (ST603).

If Probe Req Info fails to match Touch Info, the control unit 200 shiftsto the Probe Req Wait state (ST602). However, if the source of the ProbeRequest frame is definitely the same as the source of Touch Info, thecontrol unit 200 may shift to the NG label (LA605). Furthermore, if theT_ProbeReq times out without notification of Probe Req Info from thedesired wireless communication apparatus 10, the control unit 200 shiftsto the NG label (LA605).

FIG. 8C shows inputs to and outputs from the control unit 200 andinternal processing by the control unit 200 during a transition of thecontrol unit 200 from the Asoc Req Wait state (ST603) to a Ticket InfoWait state (ST604), the Asoc Req Wait state (ST603), or the NG label(LA605).

In the Asoc Req Wait state (ST603), the control unit 200 waits to benotified of the information in the Association Response frame (Asoc ReqInfo in FIG. 8C) by the first wireless communication unit 201.

When notified of Asoc Req Info, the control unit 200 determines whetherAsoc Req Info matches Probe Req Info. A match between Asoc Req Info andProbe Req Info means that various pieces of information (for example,the value set in the source address) included in Asoc Req Info match thecorresponding pieces of information included in Proc Req Info.

If Asoc Req Info matches Probe Req Info, the control unit 200 providesthe first wireless communication unit 201 with a command to transmit theAssociation Response frame containing a value indicating that theconnection request is to be accepted (an Asoc Rsp (success) Tx commandin FIG. 8C). Moreover, the control unit 200 sets the maximum time forwaiting for a data frame containing the ticket information, in a timer(T_Ticket in FIG. 8C), and shifts to the Ticket Info Wait state (ST604).

If the authentication apparatus 20 exchanges data frames containinginformation other than the ticket information, for example, contentsinformation or advertisement information, with the wirelesscommunication apparatus 10, the control unit 200 desirably provides acommand enabling data transmissions to an element corresponding to theapplication layer of the wireless LAN.

If Asoc Req Info fails to match Probe Req Info, the control unit 200provides the first wireless communication unit 201 with a command totransmit the Association Response frame containing a value indicatingthat the connection request is to be rejected (an Asoc Rsp (refused) Txcommand in FIG. 8C). The control unit 200 then shifts to the Asoc ReqWait state (ST603). However, if the source of the Association Requestframe is definitely the same as the source of the Probe Request frame,the control unit 200 may shift to the NG label (LA605).

If T_AsocReq times out without notification of Asoc Req Info from thedesired wireless communication apparatus 10, the control unit 200 shiftsto the NG label (LA605).

FIG. 8D shows inputs to and outputs from the control unit 200 during atransition of the control unit 200 from the Ticket Info Wait state(ST604) to the Idle state (ST601).

In the Ticket Info Wait state (ST604), the control unit 200 waits to benotified of ticket information (Ticket Info in FIG. 8D) by the firstwireless communication unit 201.

When notified of Ticket Info, the control unit 200 determines whether ornot the Ticket Info is appropriate. If Ticket Info is appropriate, thecontrol unit 200 provides the first wireless communication unit 201 witha command to transmit a data frame containing information indicatingthat the passage is accepted (Acceptance in FIG. 8D). Moreover, thecontrol unit 200 notifies the user of information indicative ofauthentication acceptance on the application (OK in FIG. 8D) via theuser interface unit 203 and then shifts to the Idle state (ST601).

On the other hand, if Ticket Info is not appropriate, the control unit200 provides the first wireless communication unit 201 with a command totransmit a data frame containing information indicating that the passageis rejected (Rejection in FIG. 80). Moreover, the control unit 200notifies the user of information indicative of authentication rejectionon the application (NG in FIG. 8D) via the user interface unit 203 andthen shifts to the Idle state (ST601).

Furthermore, if T_Ticket times out without notification of Ticket Info,the control unit 200 provides the first wireless communication unit 201with the Rejection command to transmit a data frame containinginformation indicating that the passage is rejected. Moreover, thecontrol unit 200 notifies the user of NG via the user interface unit203, and shifts to the Idle state (ST601). However, if T_Ticket timesout, the exchange of data frames between the authentication apparatus 20and the wireless communication apparatus 10 may be difficult for somereason. Hence, the control unit 200 may save the communication capacityby omitting the Rejection command, which is to transmit the data framecontaining information indicating that the passage is rejected.

Each of the various signals described in FIG. 6A, FIG. 6B, FIG. 6C, FIG.6D, FIG. 7A, FIG. 7B, FIG. 7C, FIG. 7D, FIG. 7E, FIG. 8A, FIG. 8B, FIG.8C, and FIG. 8D can be associated with any one of the various serviceprimitives defined in the IEEE 802.11 wireless LAN standard.

The Probe Req Tx command in FIG. 6A and FIG. 7B corresponds toMLME-SCAN.request. Scan Cfm Info in FIG. 6B and FIG. 7C corresponds toMLME-SCAN.confirm.

The synchronization command, included in the Join and Asoc Req Txcommand in FIG. 6B and FIG. 7C, corresponds to MLME-JOIN.request.Although not described with reference to FIG. 6B and FIG. 7C,information indicative of the result of the synchronization command istransmitted from the MLME to the SME. The information indicative of theresult of the synchronization command corresponds to MLME-JOIN.confirm.The command to transmit the Association Request frame, included in theJoin and Asoc Req Tx command, corresponds to MLME-ASSOCIATE.request.

Asoc Cfm Info in FIG. 6C and FIG. 7D corresponds toMLME-ASSOCIATE.confirm. Asoc Req Info in FIG. 8C corresponds toMLME-ASSOCIATE.indication. The Asoc Rsp (success) Tx command and AsocRsp (refused) Tx command in FIG. 8C correspond toMLME-ASSOCIATE.response.

According to the IEEE 802.11 wireless LAN standard, the SME does notdetermine whether or not to transmit the Probe Response frame inresponse to the Probe Request frame. That is, the command to transmitthe Probe Response frame is provided by the MLME.

However, according to the description of FIG. 8B, the SME is notified ofProbe Req Info by the MLME. Moreover, the SME determines whether or notto provide the Probe Rsp Tx command to the MLME based on Probe Req Info.

In general, according to the IEEE 802.11 wireless LAN standard, signalsexchanged between the SME and the MLME are defined as serviceprimitives. Hence, a service primitive corresponding to the notificationof Probe Req Info and a service primitive corresponding to the Probe RspTx command need to be newly defined in order to associate the example ofoperation in FIG. 8B with the IEEE 802.11 wireless LAN standard.

The Ticket Info command in FIG. 6C and FIG. 7D, the Acceptance commandin FIG. 8D, and the Rejection command are commands to transmit dataframes, each including ticket information, acceptance indication, andrejection indication, and correspond to MA-UNITDATA.request. Althoughnot described with reference to FIG. 6C, FIG. 7D, and FIG. 8D, thenotification of information indicative of the result ofMA-UNITDATA.request corresponds to MA-UNITDATA.confirm orMA-UNITDATA-STATUS.indication.

The notification of Acceptance in FIG. 6D and FIG. 7E, the notificationof Rejection in FIG. 6D and FIG. 7E, and the notification of Ticket Infoin FIG. 8D correspond to MA-UNITDATA.indication.

In the description of FIG. 3, FIG. 6A, FIG. 6B, FIG. 6C, FIG. 6D, FIG.7A, FIG. 75, FIG. 7C, FIG. 7D, FIG. 7E, FIG. 8A, FIG. 8B, FIG. 8C, andFIG. 80, the exchange of frames for the Association process has beendiscussed. Based on the IEEE 802.11 wireless LAN standard, frames forthe Authentication process may be exchanged in addition to the framesfor the Association process. The exchange of the frames for theAuthentication process may be carried out before or after the exchangeof the frames for the Association process. The order of the frameexchanges depends on the manner of setting security. Informationexchanged via the Authentication process may be also used at theauthentication apparatus to check the wireless communication apparatusby a similar way as in the Association process described above.

As described above, the wireless communication apparatus according tothe present embodiment transmits signals to the authentication apparatusaccording to the present embodiment based on the second wirelesscommunication scheme. The authentication apparatus performs first-stageauthentication by comparing information in a signal received from thewireless communication apparatus with information from the server. Uponreceiving a signal for a scan (for example, the Probe Request frame)after the first-stage authentication, the authentication apparatustransmits a signal for a response (for example, the Probe Request frame)only if the source address of the signal matches the informationcontained in the above-described received signal based on the secondwireless communication scheme. Hence, the wireless communicationapparatus can easily determine the destination address of a signal for aconnection request (for example, the Association Request frame) whichaddress corresponds to one of a plurality of nearby authenticationapparatuses. The wireless communication apparatus can thus transmit aconnection request to the determined authentication apparatus in a shorttime. The authentication apparatus performs second-stage authenticationby using the received signal based on the second wireless communicationscheme to determine whether or not to accept the connection request. Theauthentication apparatus performs third-stage authentication bydetermining whether or not ticket information contained in a data frameis appropriate after the connection is completed. Thus, the presentembodiment enables secure authentication using wireless communication.

The wireless communication apparatus 10 in FIG. 1 can be adapted bypower supply control to consume less power. For example, the wirelesscommunication apparatus 10 transmits a signal based on the secondwireless communication scheme and then transmits a signal based on thefirst wireless communication scheme. Thus, even if a power supply forthe operation of the first wireless communication unit 101 is partly orentirely turned off before the transmission of a signal is started basedon the first wireless communication scheme, by taking an appropriatemargin to start up the first wireless communication unit 101 before thetransmission, the wireless communication apparatus 10 can operatewithout any problem.

Furthermore, the wireless communication apparatus 10 starts exchanging asignal for a connection request, a signal for a data transmission, andthe like with the desired authentication apparatus only if the wirelesscommunication apparatus 10 transmits a signal for a scan and receives asignal for a response to the signal for a scan from the desiredauthentication apparatus before the timer times out. Hence, for example,if the first wireless communication unit 101 can be configured tocomprise a power supply for the operation of a functional unit forexchange of the signal for a scan and a separately formed power supplyfor the operation of a functional unit for exchange of the signal for aconnection request and a functional unit for exchange of the signal fora data transmission, then the wireless communication apparatus 10 can beadapted by this power supply control to consume less power.Specifically, even if the power supply for the operation of thefunctional unit for exchange of the signal for a connection request andthe functional unit for exchange of the signal for a data transmissionis partly or entirely turned off until the wireless communicationapparatus 10 receives the signal for a response to the signal for a scanfrom the desired authentication apparatus and acquires addressinformation on the authentication apparatus, the wireless communicationapparatus 10 can operate without any problem.

Upon receiving the signal for a scan, the authentication apparatus 20determines whether or not to transmit the signal for a response to thesignal for a scan using information contained in a received signal basedon the second wireless communication scheme. Hence, the authenticationapparatus 20 prevents possible exchange of redundant signals (forexample, the Probe Response frame, the Association Request frame, andthe Association Response frame). That is, the relevant medium isrestrained from being occupied, allowing communication capacity to beeasily saved. For example, if CSMA/CA (Carrier Sense Multiple Accesswith Carrier Avoidance) is adopted as is the case with the IEEE 802.11wireless LAN standard, the occupancy of the medium by a certain wirelesscommunication apparatus means a delay in the transmission of frames byanother wireless communication apparatus. If the authenticationapparatus 20 is an automatic ticket gate, in order to smoothly manageentries and exits, it is desirable for the authentication apparatus 20to connect to the wireless communication apparatus 10 and complete theexchange of data frames with the wireless communication apparatus 10within a short time. The authentication apparatus 20 restrains themedium from being occupied, eventually allowing authentication to becompleted within a short time. That is, smooth management of entries andexits can be achieved at the authentication apparatus 20.

Second Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a second embodiment are basically the same as or similar tothe wireless communication apparatus and authentication apparatusdescribed above in the first embodiment except that the wirelesscommunication apparatus according to the second embodiment omits thetransmission of the Probe Request frame.

FIG. 9 illustrates signals exchanged between the wireless communicationapparatus 10 and the authentication apparatus 20. In FIG. 9, STA is anabbreviation of “station” and denotes the wireless communicationapparatus 10. Similarly, AP is an abbreviation of “access point”corresponding to a base station and denotes the authentication apparatus20.

First, the user operates the user interface unit 103 of the wirelesscommunication apparatus 10, and the control unit 100 of the wirelesscommunication apparatus 10 executes a certain application. Theapplication may be executed based on a condition different from the useroperation. Specifically, the application may be automatically executedon the condition that the wireless communication apparatus 10 enters acommunication area based on a second wireless communication schemeprovided by the authentication apparatus 20.

When the application is executed, the control unit 100 provides thesecond wireless communication unit 102 with a command to transmit asignal (S701). The signal (S701) includes an SSID, a reservation ID, andthe MAC address of the first wireless communication unit 101. The signal(S701) is received by the second wireless communication unit 202.

The second wireless communication unit 202 notifies the control unit 200of the information in the signal (S701). The control unit 200 checks thesignal (S701) for its consistency. Specifically, the control unit 200determines whether or not the SSID contained in the signal (S701)matches an SSID designated by the server 30. Moreover, the control unit200 determines whether or not the reservation ID contained in the signal(S701) matches one of a plurality of acceptable reservation IDsdesignated by the server 30.

If both the SSID and reservation ID contained in the signal (S701) areappropriate, the authentication apparatus 20 continues to authenticatethe wireless communication apparatus 10. Specifically, the control unit200 provides the first wireless communication unit 201 with a command totransmit the Probe Response frame (S702). The Probe Response frame(S702) is the same as or similar to the Probe Response frame (S303) inFIG. 3. On the other hand, if at least one of the SSID and reservationID contained in the signal (S701) is inappropriate, the authenticationapparatus 20 discontinues the authentication process (rejectsauthentication) of the wireless communication apparatus 10. Furthermore,for example, the authentication apparatus 20 closes the flap door anddisplays an image indicating that passage is rejected.

The control unit 200 sets the destination address field of the ProbeResponse frame (S702) to the MAC address of the first wirelesscommunication unit 101. The MAC address of the first wirelesscommunication unit 101 can be acquired from the signal (S701).

The control unit 200 sets the MAC address of the first wirelesscommunication unit 201 in the source address field and BSSID field ofthe Probe Response frame (S702). The control unit 200 sets the SSID inthe frame body of the Probe Response frame (S702). The SSID can beacquired from the server 30 and from the signal (S701).

The Probe Response frame is received by the first wireless communicationunit 101. The first wireless communication unit 101 determines whetheror not the destination address in the Probe Response frame (S702) isappropriate. The appropriate destination address means that the valueset in the destination address matches the MAC address of the firstwireless communication unit 201. If the destination address in the ProbeRequest frame (S702) is appropriate, the first wireless communicationunit 101 continues the reception process. The first wirelesscommunication unit 101 notifies the control unit 100 of the informationin the Probe Request frame (S702).

When notified of the information in the Probe Response frame (S702), thecontrol unit 100 provides the first wireless communication unit 101 witha command to transmit the Association Request frame (S703). TheAssociation Request frame (S703) is the same as or similar to theAssociation Request frame (S304) in FIG. 3.

The control unit 100 sets the MAC address of the first wirelesscommunication unit 201 in the destination address field and BSSID fieldof the Association Request frame (S703). The MAC address of the firstwireless communication unit 201 can be acquired from the Probe Responseframe (S702).

The control unit 100 sets the MAC address of the first wirelesscommunication unit 101 in the source address field of the AssociationRequest frame (S703). The control unit 100 sets an SSID in the framebody of the Association Request frame (S703). The SSID can be acquiredfrom the server 30 (at the time of purchase of a ticket) and from theProbe Response frame (S702).

The Association Request frame (S703) is received by the first wirelesscommunication unit 201. The first wireless communication unit 201determines whether or not the destination address in the AssociationRequest frame (S703) is appropriate. If the destination address in theAssociation Request frame (S703) is appropriate, the first wirelesscommunication unit 201 continues the reception process. The firstwireless communication unit 201 notifies the control unit 200 of theinformation in the Association Request frame (S703).

The control unit 200 checks the Association Request frame (S703) for itsconsistency. Specifically, the control unit 200 determines whether ornot the value set in the source address field of the Association Requestframe (S703) matches the MAC address of the first wireless communicationunit 101 contained in the signal (S701).

The control unit 200 then provides the first wireless communication unit201 with a command to transmit the Association Response frame (S704).The Association Response frame (S704) is the same as or similar to theAssociation Response frame (S305) in FIG. 3.

A value indicating whether the connection request is to be accepted orrejected is set in the status code field carried in the AssociationResponse frame (S704). Specifically, if the value set in the sourceaddress in the received frame (S703) matches the MAC address of thefirst wireless communication unit 101 contained in the signal (S701),the control unit 200 sets a value indicating that the connection requestis to be accepted, in the status code field. On the other hand, if thevalue set in the source address in the received frame (S703) fails tomatch the MAC address of the first wireless communication unit 101contained in the signal (S701), the control unit 200 sets a valueindicating that the connection request is to be rejected, in the statuscode field.

The control unit 200 may determine whether the connection request is tobe accepted or rejected based on the consistency of the SSID in additionto the source address. For example, if the SSID set in the frame body ofthe Association Request frame (S703) fails to match the SSID containedin the signal (S701), the control unit 200 may set a value indicatingthat the connection request is to be rejected, in the status code field.Furthermore, the control unit 200 may determine whether the connectionrequest is to be accepted or rejected based on the consistency of thereservation ID in addition to the source address. For example, if thereservation ID set in the frame body of the Association Request frame(S703) fails to match the reservation ID contained in the signal (S701),the control unit 200 may set a value indicating that the connectionrequest is to be rejected, in the status code field.

The control unit 200 sets the MAC address of the first wirelesscommunication unit 101 in the destination address field of theAssociation Response frame (S704). The MAC address of the first wirelesscommunication unit 101 can be acquired from the Association Requestframe (S703) and the signal (S701).

The control unit 200 sets the MAC address of the first wirelesscommunication unit 201 in the source address field and BSSID field ofthe Association Response frame (S704). The control unit 200 sets a valueindicating whether the connection request is to be accepted or rejected,in the status code field carried in the frame body of the AssociationResponse frame (S704). For example, if the connection request is to beaccepted, the control unit 200 sets “0” (that is, Successful) in thestatus code field. If the connection request is to be rejected, thecontrol unit 200 sets a value other than “0” in the status code field. Anew status code value indicating that the connection request is to berejected may be defined.

The Association Response frame (S704) is received by the first wirelesscommunication unit 101. The first wireless communication unit 101determines whether or not the destination address in the AssociationResponse frame (S704) is appropriate. If the destination address in theAssociation Response frame (S704) is appropriate, the first wirelesscommunication unit 101 continues the reception process. The firstwireless communication unit 101 notifies the control unit 100 of theinformation in the Association Response frame (S704).

The control unit 100 determines whether the connection request isaccepted or rejected based on the status code in the AssociationResponse frame (S704). If the connection request is accepted, exchangeof data frames is started between the wireless communication apparatus10 and the authentication apparatus 20 via the wireless LAN.

The details of operation of the control unit 100 provided in thewireless communication apparatus 10 according to the present embodimentcan be described using the SDL as illustrated in FIG. 10A, FIG. 10B,FIG. 10C, and FIG. 10D.

In the description below, it is assumed that the terminal managemententity provided in the control unit 100 gives commands to the MACsublayer management entity to allow the first wireless communicationunit 101 to be controlled.

In the example illustrated in FIG. 10A, FIG. 10B, FIG. 10C, and FIG.10D, it is assumed that the second wireless communication scheme doesnot provide a mechanism for directly confirming that communication iscompleted. For example, the second wireless communication schemecorresponds to communication implemented by displaying and reading a barcode. However, when notified of the information in the Probe Responseframe from the appropriate access point, the control unit 100 canindirectly confirm that the communication based on the second wirelesscommunication scheme is completed.

FIG. 10A shows inputs to and outputs from the control unit 100 andinternal processing by the control unit 100 during a transition of thecontrol unit 100 from the Idle state (ST801) to the Scan Cfm Wait state(ST802).

In the Idle state (ST801), for example, the control unit 100 is notifiedof a command to start the application (the Ticket Gate Application Startcommand in FIG. 10A) based on an operation on the user interface unit103. The control unit 100 provides the second wireless communicationunit 102 with a command to transmit a signal (Touch Info in FIG. 10A).Touch Info includes an SSID, a reservation ID, and the MAC address ofthe first wireless communication unit 101.

Moreover, the control unit 100 provides the first wireless communicationunit 101 with a command to wait for the Probe Response frame for aspecific period and to notify the control unit 100 of the information inthe Probe Response frame (Scan Enable in FIG. 10A).

When provided with Scan Enable, the first wireless communication unit101 operates to notify the control unit 100 of the information in thereceived Probe Response frame (Scan Cfm Info in FIG. 10B) when the firstwireless communication unit 100 receives the Probe Response frame withthe MAC address of the first wireless communication unit 101 set in thedestination address for the first time.

Furthermore, the first wireless communication unit 101 may operate tofilter the received Probe Response frame based on the destinationaddress and other conditions and to notify the control unit 100 of ScanCfm Info based on the Probe Response frame having first passed throughall of the filtering.

In order to associate the example of operation in FIG. 10A with the IEEE802.11 wireless LAN standard, a service primitive corresponding to ScanEnable and a service primitive corresponding to the notification of ScanCfm Info need to be newly defined.

The control unit 100 sets the maximum time for waiting for the ProbeResponse frame in the timer (T_AppEnd in FIG. 10A), and shifts to theScan Cfm Wait state (ST802).

FIG. 10B shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Scan Cfm Wait state (ST802)to the Asoc Cfm Wait state (ST803) or the Idle state (ST801). Moreover,FIG. 10B shows an output from the control unit 100 during a transitionof the control unit 100 from the NG label (LA805) to the Idle state(ST801). FIG. 10B illustrates an operation that is the same as orsimilar to the operation illustrated in FIG. 6B described above and willthus not be described.

FIG. 10C shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Asoc Cfm Wait state (ST803)to the Acceptance Wait state (ST804) or the NG label (LA805). FIG. 10Cillustrates an operation that is the same as or similar to the operationillustrated in FIG. 6C and FIG. 7D described above and will thus not bedescribed.

FIG. 10D shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Acceptance Wait state(ST804) to the Idle state (ST801) or the NG label (LA805). FIG. 10Dillustrates an operation that is the same as or similar to the operationillustrated in FIG. 6D and FIG. 7E described above and will thus not bedescribed.

As described above, in the example illustrated in FIG. 10A, FIG. 10B,FIG. 10C, and FIG. 10D, it is assumed that the second wirelesscommunication scheme does not provide a mechanism for directlyconfirming that communication is completed. If the second wirelesscommunication scheme provides a mechanism for directly confirming thatcommunication is completed, the control unit 100 may operate asillustrated in FIG. 11A, FIG. 11B, FIG. 11C, FIG. 11D, and FIG. 11Einstead of FIG. 10A, FIG. 10B, FIG. 10C, and FIG. 10D.

FIG. 11A shows inputs to and outputs from the control unit 100 andinternal processing by the control unit 100 during a transition of thecontrol unit 100 from the Idle state (ST901) to the Touch Wait state(ST902).

In the Idle state (ST901), for example, the control unit 100 is notifiedof a command to start the application (the Ticket Gate Application Startcommand in FIG. 11A), for example, based on an operation on the userinterface unit 103. The control unit 100 provides the second wirelesscommunication unit 102 with a command to transmit a signal (Touch Infoin FIG. 11A). Touch Info includes an SSID, a reservation ID, and the MACaddress of the first wireless communication unit 101.

Moreover, the control unit 100 provides the first wireless communicationunit 101 with a command to wait for the Probe Response frame for aspecific period and to notify the control unit 100 of the information inthe Probe Response frame (Scan Enable in FIG. 11A). The control unit 100sets the maximum time for waiting for the Probe Response frame in thetimer (T_AppEnd in FIG. 11A), and shifts to the Touch Wait state(ST902).

FIG. 11B shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Touch Wait state (ST902) tothe Scan Cfm Wait state (ST903) or the Idle state (ST901). Moreover,FIG. 11B shows an output from the control unit 100 during a transitionof the control unit 100 from the NG label (LA906) to the Idle state(ST901).

In the Touch Wait state (ST902), the control unit 100 waits to benotified, by the second wireless communication unit 102, of informationindicating that the communication of Touch Info is completed (TouchComplete in FIG. 11B). When notified of Touch Complete, the control unit100 shifts to the Scan Cfm Wait state (ST903).

At the NG label (LA906), the control unit 100 notifies the user ofinformation indicative of authentication rejection on the application(NG in FIG. 11B) via the user interface unit 103 and then shifts to theIdle state (ST901). If the timer (T_AppEnd in FIG. 11B) times outwithout notification of Touch Complete, the control unit 100 performs anoperation that is the same as or similar to the operation performed atthe NG label (LA906).

FIG. 11C shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Scan Cfm Wait state (ST903)to the Asoc Cfm Wait state (ST904) or the NG label (LA906).

In the Scan Cfm Wait state (ST903), the control unit 100 waits to benotified of the information (Scan Cfm Info in FIG. 11C) in the ProbeResponse frame by the first wireless communication unit 101.

When notified of Scan Cfm Info, the control unit 100 determines whetheror not the Probe Response frame has been transmitted by the appropriateaccess point (authentication apparatus 20). If the Probe Response framehas been transmitted by the appropriate access point, the control unit100 provides the first wireless communication unit 101 with commands tosynchronize with a BSS specified by a BSSID equal to the MAC address ofthe access point and to transmit the Association Request frame to theaccess point (the Join and Asoc Req Tx command in FIG. 11C). The controlunit 100 then shifts to the Asoc Cfm Wait state (ST904).

On the other hand, if the Probe Response frame has not been receivedfrom the appropriate access point, then the control unit 100 shifts tothe NG label (LA906). Furthermore, if the timer (T_AppEnd) times outwithout notification of Scan Cfm Info from the first wirelesscommunication unit 101, the control unit 200 shifts to the NG label(LA906).

FIG. 11D shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Asoc Cfm Wait state (ST904)to the Acceptance Wait state (ST905) or the NG label (LA906). FIG. 11Dillustrates an operation that is the same as or similar to the operationillustrated above with reference to FIG. 6C, FIG. 7D, and FIG. 10C andwill thus not be described below.

FIG. 11E shows inputs to and outputs from the control unit 100 during atransition of the control unit 100 from the Acceptance Wait state(ST905) to the Idle state (ST901) or the NG label (LA906). FIG. 11Eillustrates an operation that is the same as or similar to the operationillustrated above with reference to FIG. 6D, FIG. 7E, and FIG. 10D, andwill thus not be described below.

The details of operation of the control unit 200 provided in thewireless communication apparatus 20 according to the present embodimentcan be described using the SDL as illustrated in FIG. 12A, FIG. 12B, andFIG. 12C.

In the description below, it is assumed that the terminal managemententity provided in the control unit 200 gives commands to the MACsublayer management entity to allow the first wireless communicationunit 201 to be controlled.

FIG. 12A shows inputs to and outputs from the control unit 200 andinternal processing by the control unit 200 during a transition of thecontrol unit 200 from the Idle state (ST1001) to the Asoc Req Wait state(ST1002) or the Idle state (ST1001). Moreover, FIG. 12A shows an outputfrom the control unit 200 during a transition of the control unit 200from the NG label (LA1004) to the Idle state (ST1001).

In the Idle state (ST1001), for example, the control unit 200 isnotified, by the second wireless communication unit 202, of theinformation in the signal received by the second wireless communicationunit 202 (Touch Info in FIG. 12A). Touch Info includes an SSID, areservation ID, and the MAC address of the first wireless communicationunit 101.

The control unit 200 determines whether or not Touch Info matchesinformation acquired from the server 30 (Server Info). If Touch Infomatches Server Info, the control unit 200 sets the maximum time forwaiting for the Association Request frame, in the timer (T_AsocReq inFIG. 12A). Moreover, the control unit 200 provides the first wirelesscommunication unit 201 with a command to transmit the Probe Responseframe to the desired wireless communication apparatus 10 (the Probe RspTx command in FIG. 12A). The control unit 200 then shifts to the AsocReq Wait state (ST1002).

At the NG label (LA1004), the control unit 200 notifies the user ofinformation indicative of authentication rejection on the application(NG in FIG. 12A) via the user interface unit 203 and then shifts to theIdle state (ST1001). For example, the user interface unit 203 closes theflap door and displays an image indicating that passage is rejected. IfTouch Info fails to match Server Info, the control unit 200 performs anoperation that is the same as or similar to the operation performed atthe NG label (LA1004). Moreover, the control unit 200 may perform anoperation that is the same as or similar to the operation performed atthe NG label (LA1004) if passage of a human being is detected withoutnotification of Touch Info.

FIG. 12B shows inputs to and outputs from the control unit 200 andinternal processing by the control unit 200 during a transition of thecontrol unit 200 from the Asoc Req Wait state (ST1002) to the TicketInfo Wait state (ST1003), the Asoc Req Wait state (ST1002), or the NGlabel (LA1004). FIG. 12B illustrates an operation that is the same as orsimilar to the operation illustrated in FIG. 8C described above, andwill thus not be described below.

FIG. 12C shows inputs to and outputs from the control unit 200 during atransition of the control unit 200 from the Ticket Info Wait state(ST1003) to the Idle state (ST1001). FIG. 12C illustrates an operationthat is the same as or similar to the operation illustrated in FIG. 8Ddescribed above, and will thus not be described below.

Third Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a third embodiment are basically the same as or similar tothe wireless communication apparatus and authentication apparatusaccording to the second embodiment except that the wirelesscommunication apparatus does not omit the transmission of a ProbeRequest frame. According to the present embodiment, the authenticationapparatus 20 is the same as or similar to the authentication apparatus20 according to the second embodiment. That is, the authenticationapparatus 20 transmits a Probe Response frame in accordance with thesignal in FIG. 9 (S701) instead of the Probe Request frame.

According to the present embodiment, a wireless communication apparatus10 can operate in accordance with the regular IEEE 802.11 wireless LANstandard. Hence, an implementation load on the wireless communicationapparatus 10 can be reduced.

The details of operation of the control unit 100 provided in thewireless communication apparatus 10 according to the present embodimentcan be described using the SDL. Specifically, the operation of thecontrol unit 100 is the same as or similar to the example of operationin FIG. 6A, FIG. 6B, FIG. 6C, and FIG. 6D or the example of operation inFIG. 7A, FIG. 7B, FIG. 7C, FIG. 7D, and FIG. 7E.

The details of operation of the control unit 200 provided in thewireless communication apparatus 20 according to the present embodimentcan be described using the SDL. Specifically, the operation of thecontrol unit 200 is the same as or similar to the operation illustratedin FIG. 12A, FIG. 12B, and FIG. 12C.

Fourth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a fourth embodiment are basically the same as or similar tothe wireless communication apparatus and authentication apparatusaccording to the second embodiment except that the authenticationapparatus transmits a signal replacing the Probe Response frame, basedon the second wireless communication scheme.

Specifically, according to the present embodiment, the control unit 200,when notified of the information in the signal in FIG. 9 (S701) by thesecond wireless communication unit 202, provides the second wirelesscommunication unit 202 with a command to transmit the signal.

The signal replaces the Probe Response frame (S702) in FIG. 9 andcontains information that is the same as or similar to the informationin the Probe Response frame (S702). For example, the signal contains theMAC address of the first wireless communication unit 201. As describedabove, the MAC address of the first wireless communication unit 201 isequal to a BSSID. Furthermore, the above-described transmitted signalmay contain an SSID. The control unit 100 may determine whether or notthe SSID is appropriate.

If the second wireless communication scheme is communication using acontact IC card or a noncontact IC card or NFC, which enables thecommunication partner to be uniquely identified, the destination address(for example, the MAC address of the first wireless communication unit101) can be omitted from the above-described signal.

The second wireless communication unit 102 receives the signal replacingthe Probe Response frame in FIG. 9 (S702), and notifies the control unit100 of the information in the received signal. Based on the MAC addressof the first wireless communication unit 201 contained in the receivedsignal, the control unit 100 provides the first wireless communicationunit 101 with a command to transmit the Association Request frame(corresponding to the Association Request frame in FIG. 9 (S703)).

The details of operation of the control unit 100 provided in thewireless communication apparatus 10 according to the present embodimentcan be described using the SOL. Specifically, the operation of thecontrol unit 100 is basically the same as or similar to the example ofoperation in FIG. 10A, FIG. 10B, FIG. 10C, and FIG. 10D or the exampleof operation in FIG. 11A, FIG. 11B, FIG. 11C, FIG. 11D, and FIG. 11E,but is different from these examples in parts of the operationillustrated in FIG. 10B and FIG. 11B. The control unit 100 is notifiedof the information (which can be referred to as, for example, TouchReply Info) in the signal received by the second wireless communicationunit 102 instead of Scan Cfm Info. Touch Reply Info includes the MACaddress of the first wireless communication unit 201.

The details of operation of the control unit 200 provided in theauthentication apparatus 20 according to the present embodiment can bedescribed using the SDL. Specifically, the operation of the control unit200 is basically the same as or similar to the example of operation inFIG. 12A, FIG. 12B, and FIG. 12C, but is different from the example in apart of the operation illustrated in FIG. 12A. The control unit 200provides the second wireless communication unit 202 with a command totransmit a signal (Touch Reply Info) instead of the Probe Rsp Txcommand. Touch Reply Info includes the MAC address of the first wirelesscommunication unit 201.

According to the present embodiment, the setting of security can becompleted by the time connection is completed by containing informationrequired to set the security in signals exchanged between the wirelesscommunication apparatus 10 and the authentication apparatus 20. Forexample, the signal replacing the Probe Response frame in FIG. 9 (S702)may contain an encryption key used by the first wireless communicationunit 201 after the connection is completed.

Fifth Embodiment

In the above-described embodiments, the authentication apparatus 20 isassumed to be an automatic ticket gate. However, the authenticationapparatus 20 may be an access point that permits the wirelesscommunication apparatus 10 to make limited use of the communication(which is hereinafter assumed to be wireless LAN communication forsimplification) based on the first wireless communication scheme in acertain place.

According to the above-described embodiments, when the wirelesscommunication apparatus 10 transmits a signal based on the secondwireless communication scheme, the authentication apparatus 20 carriesout a series of authentication processes. During these processes, thewireless communication apparatus 10 connects to the authenticationapparatus 20 via the wireless LAN. The authentication apparatus 20according to the present embodiment permits the wireless communicationapparatus 10 accepted through the series of authentication processes toutilize wireless LAN communication (for example, Internet connection,contents distribution, or advertisement distribution).

The elements of the authentication apparatus 20 need not be provided inthe same apparatus. For example, the first wireless communication unit201 may be provided in an apparatus different from the apparatus inwhich the second wireless communication unit 202 is provided. However,the different apparatuses are connected together, for example, by cableto carry out a series of authentication processes as is the case withthe above-described embodiments. If the elements of the authenticationapparatus 20 are distributed among a plurality of apparatuses, theauthentication apparatus 20 may be referred to as an authenticationsystem.

For example, an apparatus comprising the second wireless communicationunit 202 is disposed at an entrance of a certain place (for example, awireless LAN area provided by the authentication apparatus 20). The userof the wireless communication apparatus 10 allows the second wirelesscommunication unit 102 to transmit a signal by, for example, executing acertain application. The second wireless communication unit 202 receivesthe signal, and the authentication apparatus 20 carries out a series ofauthentication processes. If the wireless communication apparatus 10 hasan appropriate authority, the wireless communication apparatus 10 ispermitted to utilize the wireless LAN communication. On the other hand,if the wireless communication apparatus 10 fails to have an appropriateauthority, the wireless communication apparatus 10 is not permitted toutilize the wireless LAN communication.

The present embodiment can implement an access point that permits thewireless communication apparatus to make limited use of thecommunication based on the first wireless communication scheme in acertain place.

Sixth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a sixth embodiment are basically the same as or similar tothe wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments, but furthercomprise a buffer for the communication based on the first wirelesscommunication scheme.

For example, the wireless communication apparatus 10 in FIG. 1 maycomprise a buffer in the first wireless communication unit 101 or in thememory (not shown in the drawings) used by the first wirelesscommunication unit 101. Furthermore, the authentication apparatus 20 inFIG. 2 may comprise a buffer in the first wireless communication unit201 or in the memory (not shown in the drawings) used by the firstwireless communication unit 201.

Provision of such a buffer enables signals transmitted and receivedbased on the first wireless communication scheme to be saved. That is,for example, a process of retransmitting the signals and a process ofoutputting the signals to the exterior can be easily implemented.

Furthermore, the wireless communication apparatus and authenticationapparatus according to the present embodiment may further comprise abuffer for communication based on the communication based on the secondwireless communication scheme. For example, the wireless communicationapparatus 10 in FIG. 1 may comprise a buffer in the second wirelesscommunication unit 102 or in the memory (not shown in the drawings) usedby the second wireless communication unit 102. Furthermore, theauthentication apparatus 20 in FIG. 2 may comprise a buffer in thesecond wireless communication unit 202 or in the memory (not shown inthe drawings) used by the second wireless communication unit 202.

Provision of such a buffer enables signals transmitted and receivedbased on the second wireless communication scheme to be saved. That is,for example, a process of retransmitting the signals and a process ofoutputting the signals to the exterior can be easily implemented.

Seventh Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a seventh embodiment are basically the same as or similarto the wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments except that firmwareruns in the control unit. The present embodiment allows wirelesscommunication functions to be easily changed by rewriting the firmware.

Eighth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to an eighth embodiment are basically the same as or similarto the wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments except that thefirst wireless communication unit further comprises a clock generationunit that generates a clock signal. The control unit operates based onthe clock signal from the clock generation unit.

Specifically, in the wireless communication apparatus 10 in FIG. 1, thefirst wireless communication unit 101 comprises a clock generation unit,and the control unit 100 operates based on a clock signal from the clockgeneration unit. Furthermore, in the authentication apparatus 20 in FIG.2, the first wireless communication unit 201 comprises a clockgeneration unit, and the control unit 200 operates based on a clocksignal from the clock generation unit.

The control unit can operate in synchronism with the first wirelesscommunication unit by operating based on the clock signal generated bythe first wireless communication unit.

Furthermore, in the wireless communication apparatus and authenticationapparatus according to the present embodiment, the second wirelesscommunication unit may operate based on the clock signal from the clockgeneration unit in the first wireless communication unit. That is, inthe wireless communication apparatus 10 in FIG. 1, the second wirelesscommunication unit 102 may operate based on the clock signal from theclock generation unit in the first wireless communication unit 101. Inthe authentication apparatus 20 in FIG. 2, the second wirelesscommunication unit 202 may operate based on the clock signal from theclock generation unit in the first wireless communication unit 201.

The second wireless communication unit can operate in synchronism withthe first wireless communication unit by operating based on the clocksignal generated by the first wireless communication unit.

Ninth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a ninth embodiment are basically the same as or similar tothe wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments, but furthercomprise a power supply unit, a power supply control unit, and awireless power feeding unit. The power supply control unit is connectedto the power supply unit and the wireless power feeding unit, andselects one of the power supply unit and the wireless power feeding unitas a power supply for the apparatus. The present embodimentappropriately controls the power supply for the apparatus to enableoperation with reduced power consumption.

Tenth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a tenth embodiment are basically the same as or similar tothe wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments, but furthercomprise a moving image compression/decompression unit. The presentembodiment can facilitate transmission of compressed moving images anddecompression of received compressed moving images.

Eleventh Embodiment

A wireless communication apparatus and an authentication apparatusaccording to an eleventh embodiment are basically the same as or similarto the wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments except that thefirst wireless communication unit further comprises an LED (LightEmitting Diode) unit or another lighting element. The LED unit lights ina pattern corresponding to the operational status of the first wirelesscommunication unit. Thus, the user can be easily notified of theoperational status of the first wireless communication unit.

Furthermore, the second wireless communication unit may further comprisean LED unit or another lighting element. The LED unit lights in apattern corresponding to the operational status of the second wirelesscommunication unit. Thus, the user can be easily notified of theoperational status of the second wireless communication unit.

Twelfth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a twelfth embodiment are basically the same as or similarto the wireless communication apparatus and authentication apparatusaccording to any of the above-described embodiments, but furthercomprise a vibrator unit connected to the first wireless communicationunit. The vibrator unit vibrates in a pattern corresponding to theoperational status of the first wireless communication unit. Thus, theuser can be easily notified of the operational status of the firstwireless communication unit.

Furthermore, the wireless communication apparatus and authenticationapparatus according to the present embodiment comprise a vibrator unitconnected to the second wireless communication unit. The vibrator unitvibrates in a pattern corresponding to the operational status of thesecond wireless communication unit. Thus, the user can be easilynotified of the operational status of the second wireless communicationunit.

Thirteenth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a thirteenth embodiment are basically the same as orsimilar to the wireless communication apparatus and authenticationapparatus according to any of the above-described embodiments exceptthat the first wireless communication unit comprises a switching unitand a plurality of different PHY processing units. The switching unit isconnected to the plurality of PHY processing units to switch aneffective PHY processing unit. The present embodiment can perform thecommunication based on the first wireless communication scheme using theappropriate PHY processing unit according to the situation.

Fourteenth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a fourteenth embodiment are basically the same as orsimilar to the wireless communication apparatus and authenticationapparatus according to any of the above-described embodiments exceptthat the first wireless communication unit comprises a switching unitand a plurality of different wireless communication functional units(including a PHY processing unit). For example, one of the plurality ofwireless communication functional units may be a functional unit thatperforms the wireless LAN communication. The switching unit is connectedto the plurality of wireless communication functional units to switch aneffective wireless communication functional unit. The present embodimentcan perform the communication based on the first wireless communicationscheme using the appropriate wireless communication functional unitaccording to the situation.

Fifteenth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a fifteenth embodiment are basically the same as or similarto the wireless communication apparatus and authentication apparatusdescribed in the thirteenth embodiment but further comprise a switch.The switch connects the effective PHY processing unit to the antenna.The present embodiment can perform the communication based on the firstwireless communication scheme using the appropriate PHY processing unitaccording to the situation while sharing the antenna.

Sixteenth Embodiment

A wireless communication apparatus and an authentication apparatusaccording to a sixteenth embodiment are basically the same as or similarto the wireless communication apparatus and authentication apparatusdescribed in the fourteenth embodiment but further comprise a switch.The switch connects the effective wireless communication functional unitto the antenna. The present embodiment can perform the communicationbased on the first wireless communication scheme using the appropriatewireless communication functional unit according to the situation whilesharing the antenna.

The processing in the above-described embodiments can be implementedusing a general-purpose computer as basic hardware. A programimplementing the processing in each of the above-described embodimentsmay be stored in a computer readable storage medium for provision. Theprogram is stored in the storage medium as a file in an installable orexecutable format. The storage medium is a magnetic disk, an opticaldisc (CD-ROM, CD-R, DVD, or the like), a magnetooptic disc (MO or thelike), a semiconductor memory, or the like. That is, the storage mediummay be in any format provided that a program can be stored in thestorage medium and that a computer can read the program from the storagemedium. Furthermore, the program implementing the processing in each ofthe above-described embodiments may be stored on a computer (server)connected to a network such as the Internet so as to be downloaded intoa computer (client) via the network.

While certain embodiments have been described, these embodiments havebeen presented by way of example only, and are not intended to limit thescope of the inventions. Indeed, the novel embodiments described hereinmay be embodied in a variety of other forms; furthermore, variousomissions, substitutions and changes in the form of the embodimentsdescribed herein may be made without departing from the spirit of theinventions. The accompanying claims and their equivalents are intendedto cover such forms or modifications as would fall within the scope andspirit of the inventions.

What is claimed is:
 1. A wireless communication apparatus, comprising: afirst wireless communication unit configured to perform communicationusing a first wireless communication scheme; a second wirelesscommunication unit configured to perform communication using a secondwireless communication scheme; and a control unit configured to controlthe first wireless communication unit and the second wirelesscommunication unit, wherein the control unit provides the secondwireless communication unit with a command to transmit a first signalcontaining first address information assigned to the first wirelesscommunication unit, first identification information specifying adesired system and second identification information specifying anauthentication target, and when the control unit is notified ofinformation in at least one second signal received by one of the firstwireless communication unit and the second wireless communication unitafter the control unit provides the second wireless communication unitwith the command to transmit the first signal and before a first waitingtime elapses and when the at least one second signal contains secondaddress information assigned to an authentication apparatus havingreceived the first signal, then the control unit provides the firstwireless communication unit with a command to transmit a third signalfor a connection request with the second address information set in adestination address.
 2. The apparatus according to claim 1, wherein,when the control unit is notified of the information in the at least onesecond signal received by the first wireless communication unit afterthe control unit provides the second wireless communication unit withthe command to transmit the first signal and before the first waitingtime elapses and when the at least one second signal contains the secondaddress information assigned to the authentication apparatus havingreceived the first signal, then the control unit provides the firstwireless communication unit with the command to transmit the thirdsignal for a connection request with the second address information setin the destination address.
 3. The apparatus according to claim 1,wherein, when the control unit is notified of the information in the atleast one second signal received by the second wireless communicationunit after the control unit provides the second wireless communicationunit with the command to transmit the first signal and before the firstwaiting time elapses and when the at least one second signal containsthe second address information assigned to the authentication apparatushaving received the first signal, then the control unit provides thefirst wireless communication unit with the command to transmit the thirdsignal for a connection request with the second address information setin the destination address.
 4. The apparatus according to claim 1,wherein the second wireless communication scheme has a smallercommunication range than the first wireless communication scheme.
 5. Theapparatus according to claim 1, wherein the control unit provides thefirst wireless communication unit with a command to wait for the secondsignal after the command to transmit the first signal and before thefirst waiting time elapses, and upon receiving the second signal withthe first address information set in the destination address before thefirst waiting time elapses, the first wireless communication unitnotifies the control unit of the information in the second signal. 6.The apparatus according to claim 1, wherein after providing the firstwireless communication unit with the command to transmit the thirdsignal, the control unit is notified of information in a fourth signalincluding a value indicating whether or not the connection request basedon the third signal is to be accepted or rejected, and when the fourthsignal contains a value indicating that the connection request is to beaccepted, the control unit provides the first wireless communicationunit with a command to exchange data with the authentication apparatus.7. An authentication apparatus comprising: a first wirelesscommunication unit configured to perform communication using a firstwireless communication scheme; a second wireless communication unitconfigured to perform communication using a second wirelesscommunication scheme; and a control unit configured to control the firstwireless communication unit and the second wireless communication unit,wherein, when notified of information in a first signal received by thesecond wireless communication unit and including second addressinformation, first identification information specifying a desiredsystem, and second identification information specifying anauthentication target, the control unit determines whether or not thefirst identification information and the second identificationinformation are appropriate, when the first identification informationand the second identification information are appropriate, the controlunit provides one of the first wireless communication unit and thesecond wireless communication unit with a command to transmit a secondsignal containing first address information assigned to the firstwireless communication unit, when notified of information in a thirdsignal for a connection request received by the first wirelesscommunication unit after the control unit provides one of the firstwireless communication unit and the second wireless communication unitwith a command to transmit the second signal and before a first waitingtime elapses, the control unit determines, based on the second addressinformation, whether or not the connection request based on the thirdsignal is to be accepted or rejected, and the control unit provides thefirst wireless communication unit with a command to transmit a fourthsignal containing a value indicating whether the connection request isto be accepted or rejected.
 8. The apparatus according to claim 7,wherein, when the first identification information and the secondidentification information are appropriate, the control unit providesthe first wireless communication unit with a command to transmit thesecond signal containing the first address information.
 9. The apparatusaccording to claim 7, wherein, when the first identification informationand the second identification information are appropriate, the controlunit provides the second wireless communication unit with a command totransmit the second signal containing the first address information. 10.The apparatus according to claim 7, wherein the second wirelesscommunication scheme has a smaller communication range than the firstwireless communication scheme.
 11. The apparatus according to claim 7,wherein the control unit provides the first wireless communication unitwith a command to transmit a fourth signal containing a value indicatingthat the connection request is to be accepted and then provides thefirst wireless communication unit with a command to exchange data with awireless communication apparatus to which the second address informationis assigned.
 12. The apparatus according to claim 7, wherein, after thefirst wireless communication unit receives an acknowledgement to thefourth signal containing the value indicating that the connectionrequest is to be accepted, the control unit provides the first wirelesscommunication unit with a command to exchange data with a wirelesscommunication apparatus to which the second address information isassigned.
 13. A wireless communication method performed by a wirelesscommunication apparatus, the apparatus comprising: a first wirelesscommunication unit configured to perform communication using a firstwireless communication scheme; a second wireless communication unitconfigured to perform communication using a second wirelesscommunication scheme; and a control unit configured to control the firstwireless communication unit and the second wireless communication unit,the method comprising: providing, by the control unit, the secondwireless communication unit with a command to transmit a first signalcontaining first address information assigned to the first wirelesscommunication unit, first identification information specifying adesired system and second identification information specifying anauthentication target; and when the control unit is notified ofinformation in at least one second signal received by one of the firstwireless communication unit and the second wireless communication unitafter the control unit provides the second wireless communication unitwith the command to transmit the first signal and before a first waitingtime elapses and when the at least one second signal contains secondaddress information assigned to an authentication apparatus havingreceived the first signal, providing, by the control unit, the firstwireless communication unit with a command to transmit a third signalfor a connection request with the second address information set in adestination address.
 14. An authentication method performed by anauthentication apparatus comprising, the apparatus comprising: a firstwireless communication unit configured to perform communication using afirst wireless communication scheme; a second wireless communicationunit configured to perform communication using a second wirelesscommunication scheme; and a control unit configured to control the firstwireless communication unit and the second wireless communication unit,the method comprising: when notified of information in a first signalreceived by the second wireless communication unit and including secondaddress information, first identification information specifying adesired system, and second identification information specifying anauthentication target, determining, by the control unit, whether or notthe first identification information and the second identificationinformation are appropriate, when the first identification informationand the second identification information are appropriate, providing, bythe control unit, one of the first wireless communication unit and thesecond wireless communication unit with a command to transmit a secondsignal containing first address information assigned to the firstwireless communication unit, when notified of information in a thirdsignal for a connection request received by the first wirelesscommunication unit after the control unit provides one of the firstwireless communication unit and the second wireless communication unitwith a command to transmit the second signal and before a first waitingtime elapses, determining, by the control unit, based on the secondaddress information, whether or not the connection request based on thethird signal is to be accepted or rejected, and providing, by thecontrol unit, the first wireless communication unit with a command totransmit a fourth signal containing a value indicating whether theconnection request is to be accepted or rejected.